Please enable JavaScript.
Coggle requires JavaScript to display documents.
DIGITAL EVIDENCES - Coggle Diagram
-
-
-
-
-
-
ACQUIRING AN IMAGE OF EVIDENCE
MEDIA
- First rule of computer forensics
:check:Preserve the original evidence
:pencil2:Conduct your analysis only on a copy of the data
MEDIA LEAK INVESTIGATIONS
(CONSIDER)
:green_cross:Discreetly conduct forensic disk acquisitions and analysis
:green_cross:From the forensic disk examinations, analyze all e-mail
correspondence
:green_cross:Expand the discreet forensic disk acquisition and analysis